3 ms·
You can't have power without the choice to use it wrongly. You cannot add them in the new system without having the same security hole as the old system. e.g a
by Nadya 11y ago
You can't have power without the choice to use it wrongly.
You cannot add them in the new system without having the same security hole as the old system. e.g access to filesystems
You cannot have the power to access filesystems while also remaining secure. It's an all-or-nothing deal.
- pcwalton 11y ago> You cannot have the power to access filesystems while also remaining secure. It's an all-or-nothing deal. No, it's not. There are many secure applications that can access the filesystem.
- Nadya 11y agoBut they have restrictions that limit their functionality, so they are trading power for security... Imagine this. I need read/write access of the host file or an equivalent functionality of mapping any arbitrary domain name to any arbitrary IP address. There is absolutely no way to keep that secure while allowing it because the functionality itself can be used for the wrong reasons. You either allow said functionality or you don't. There is absolutely no gray area.